Re: DSA-3708-1 mat -- security update (What are MAT users to do)?

2016-11-13 Thread Stephen Dowdy
> On Sun, Nov 13, 2016 at 5:47 AM, intrigeri  wrote:
> Robert Haist:
> > For PDFs you can use exiftool from the libimage-exiftool-perl to remove
> > metadata:
> >   exiftool -all= example.pdf
> > This works for me.
>
> Does this address the problem (metadata in embedded images) that
> triggered us from removing this functionality from MAT?

Assuming the documentation is correct, the manpage for exiftool states:

>3) Changes to PDF files are reversible because the original
information is never actually deleted from the file.  >   So
ExifTool alone may not be used to securely edit metadata in PDF files.

that sounds like a "NO".  :-(

--stephen



-- 
Stephen Dowdy  -  Systems Administrator  -  NCAR/RAL
303.497.2869   -  sdo...@ucar.edu-  http://www.ral.ucar.edu/~sdowdy/


Re: DSA-3708-1 mat -- security update (What are MAT users to do)?

2016-11-13 Thread intrigeri
Robert Haist:
> For PDFs you can use exiftool from the libimage-exiftool-perl to remove
> metadata:

>   exiftool -all= example.pdf

> This works for me.

Does this address the problem (metadata in embedded images) that
triggered us from removing this functionality from MAT?



Re: DSA-3708-1 mat -- security update (What are MAT users to do)?

2016-11-13 Thread Robert Haist
For PDFs you can use exiftool from the libimage-exiftool-perl to remove
metadata:

exiftool -all= example.pdf

This works for me.

Regards,
Rob

On 10.11.2016 02:42, gwmfm...@unseen.is wrote:
> This email is in response to www.debian.org/security/2016/dsa-3708
> 
> I relied on MAT (Metadata Anonymisation Toolkit) on a daily basis to remove 
> the metadata from PDFs as it is a requirement for my job. I must have this 
> ability. I appreciate the effort to fix this bug but it was not a major issue 
> for me because the PDFs I encounter did not have images. Now that MAT cannot 
> deal with PDFs at all, I am forced to use Windows (which I hate) because I 
> cannot find a suitable alternative to MAT. 
> 
> Can anyone please suggest a Debian solution to my current problem? I am 
> assuming that Debian Stretch Stable (2017 release) will have an updated 
> version of MAT that will again process PDFs? But what can I do until then to 
> be able to meet my work demands?
> 



signature.asc
Description: OpenPGP digital signature